Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4138a7ec-7717-3fee-b185-c8334401ce0d.roa
File:                     4138a7ec-7717-3fee-b185-c8334401ce0d.roa (raw, json)
Hash identifier:          zNMuS/z4zZFU+9hymO7I9wYQ4gsqlHKTc2bq2M3saT4=
Subject key identifier:   5F:E5:EC:94:1D:E7:45:51:BB:12:7A:41:F3:9F:7F:3A:38:CF:5C:C1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F708828C93BDF3FEB24FEB280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4138a7ec-7717-3fee-b185-c8334401ce0d.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     269741
IP address blocks:        38.9.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:28:c9:3b:df:3f:eb:24:fe:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=a7d4425b-2598-45a1-921b-66cbd245ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:b0:c0:a3:3a:62:a7:fb:c7:f2:3d:43:92:
                    69:86:88:05:90:c3:b5:4c:93:43:be:49:8e:1e:2f:
                    ba:65:4d:33:24:78:8c:02:10:ea:0f:9f:4e:8d:64:
                    f5:e7:65:cd:1f:e5:ca:2d:06:05:5b:6f:56:29:b9:
                    ea:6e:50:9d:c3:a9:90:48:bc:d6:84:fe:3c:14:dc:
                    37:45:64:b9:ea:00:15:06:5a:eb:bf:bb:cc:f2:18:
                    c8:ad:d1:1d:19:5e:90:4b:99:eb:50:fe:20:0d:15:
                    19:63:e3:93:c9:13:b7:49:36:0d:91:2c:c8:83:39:
                    9d:c0:e0:45:3d:90:c7:d4:be:40:c0:2f:21:f9:1f:
                    80:02:73:85:f0:04:7f:d1:b5:48:5b:50:15:e3:78:
                    93:50:56:08:79:af:d8:61:b4:ed:1f:a2:da:f3:37:
                    e2:cb:d7:72:5b:4f:b3:a2:39:68:fa:8a:28:ef:e0:
                    76:88:44:1d:7d:e9:03:2c:1e:5d:2c:0e:2e:2b:19:
                    3f:ec:63:73:f0:84:3a:17:f4:93:48:97:6c:c5:54:
                    12:3a:80:47:bc:9f:0b:7d:4b:0b:07:ac:e8:17:15:
                    20:6e:b2:df:ad:80:0b:52:21:d5:ab:08:e7:4d:49:
                    7c:e7:84:a9:b9:bc:82:71:ea:92:1b:44:0d:19:ad:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:EC:94:1D:E7:45:51:BB:12:7A:41:F3:9F:7F:3A:38:CF:5C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4138a7ec-7717-3fee-b185-c8334401ce0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.9.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cc:d4:7c:c1:ee:5e:1e:f2:73:fa:7e:81:22:27:d3:51:b8:
         1b:f2:4a:9f:b6:f1:63:7e:8d:b8:65:15:81:e2:d7:4b:4d:90:
         38:fa:30:8f:64:4c:18:07:61:43:0c:42:b6:2f:e3:3b:a6:76:
         8d:00:33:c2:c9:09:e1:56:5f:19:b9:c6:be:a8:13:8c:7a:98:
         21:3c:5e:a8:34:ec:d4:f8:64:a7:b4:4a:0e:cb:8a:59:c0:45:
         f4:4c:3d:a0:17:0f:48:3e:39:3b:85:3a:da:f8:68:4d:bf:f6:
         49:2d:ce:70:06:cf:f5:31:ce:c4:b4:e7:42:f0:ea:ff:8e:47:
         39:9b:22:d8:25:d9:23:02:5b:8c:33:b0:e6:52:19:8a:7a:69:
         55:56:5a:2c:da:80:13:2e:af:3f:36:d4:29:0a:2b:fa:89:1b:
         a7:e2:0c:64:5e:21:7a:e7:9a:78:cc:0d:30:e8:b0:c0:bc:b7:
         a5:a8:b0:ec:59:8d:e4:50:ba:ae:16:df:de:fc:d0:90:e7:c2:
         59:79:9f:d3:df:1d:d0:a6:12:6d:ec:81:ca:83:b7:a5:f9:90:
         49:2d:47:8d:1c:15:5f:2d:52:86:7c:25:8a:85:5e:f6:7e:69:
         1c:f6:e1:8b:34:d6:10:18:ab:53:0e:f8:89:8c:d3:cc:d7:6f:
         d9:4c:86:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCjJO98/6yT+soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
YTdkNDQyNWItMjU5OC00NWExLTkyMWItNjZjYmQyNDVlZjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXuwwKM6Yqf7x/I9Q5JphogFkMO1TJNDvkmO
Hi+6ZU0zJHiMAhDqD59OjWT152XNH+XKLQYFW29WKbnqblCdw6mQSLzWhP48FNw3
RWS56gAVBlrrv7vM8hjIrdEdGV6QS5nrUP4gDRUZY+OTyRO3STYNkSzIgzmdwOBF
PZDH1L5AwC8h+R+AAnOF8AR/0bVIW1AV43iTUFYIea/YYbTtH6La8zfiy9dyW0+z
ojlo+ooo7+B2iEQdfekDLB5dLA4uKxk/7GNz8IQ6F/STSJdsxVQSOoBHvJ8LfUsL
B6zoFxUgbrLfrYALUiHVqwjnTUl854SpubyCceqSG0QNGa3JLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/l7JQd50VRuxJ6QfOffzo4z1zBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDEzOGE3ZWMtNzcxNy0z
ZmVlLWIxODUtYzgzMzQ0MDFjZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJgm4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvM1HzB7l4e8nP6foEiJ9NRuBvySp+28WN+jbhlFYHi10tNkDj6MI9k
TBgHYUMMQrYv4zumdo0AM8LJCeFWXxm5xr6oE4x6mCE8Xqg07NT4ZKe0Sg7LilnA
RfRMPaAXD0g+OTuFOtr4aE2/9kktznAGz/UxzsS050Lw6v+ORzmbItgl2SMCW4wz
sOZSGYp6aVVWWizagBMurz821CkKK/qJG6fiDGReIXrnmnjMDTDosMC8t6WosOxZ
jeRQuq4W39780JDnwll5n9PfHdCmEm3sgcqDt6X5kEktR40cFV8tUoZ8JYqFXvZ+
aRz24Ys01hAYq1MO+ImM08zXb9lMhsU=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:39 2026 by rpki-client